Notice to people who do NOT use Datta (GDPR art. 14 and equivalents)

this section · THE PUBLIC NOTICE

Someone who knows you uses Datta. Here is what happens with your data.

Datta is a personal data vault: each user stores their own information and decides who sees it. Part of that information is their address book, and their address book almost certainly contains data about you: your name as that person saved it, your number, your email.

This page explains what we do with that, what we could not do even if we wanted to, and what rights you have without creating an account.

What we hold about you

When a Datta user syncs their address book, we store each contact datum sealed (encrypted) so that only two people can open it: the user who uploaded it (it is their address book) and you, if you one day verify that the number or email is yours. Next to the sealed datum we keep a blind index (a code derived from the value, without the value) that is only good for counting matches.

Datta cannot read this data. That is not a promise of good behavior; it is how the system is built. Our servers do not hold the key, verified in shipped code: no column in the clear, neither identifier nor value.

The nickname that person saved you under, their notes, and your address-book photo never enter the network channel and are never shown to anyone: they are the writer's own annotations.

What we do with it, and what we don't

• Yes: keep the uploader's address book safe for them, like any encrypted backup.
• Yes: if you sign up and verify your number or email, show you how many people have you saved and give you control over that data.
• We do not sell data. We do not rent it. We do not use it for advertising.
• It enters no statistic. Datta's usage measurement runs on the activity of people who chose to use Datta; someone who never chose it does not appear even in a count.
• We do not show it to other users: nobody sees a datum of yours in Datta that they don't already hold in their own address book.
• We do not enrich it from outside sources or build profiles about you.

Your rights, without an account

By verifying that a number or email is yours (we send a code to that very number or email), you can:

• Know: in how many synced address books that datum appears, in ranges and without identifying their owners. The ranges are deliberate: an exact number, asked month after month, would tell you when someone added or removed you, and that is information about them, not you.
• Delete: have that datum removed from the synced copies in Datta. From the moment you ask it is restricted: it stops counting, stops being shown and stops propagating. The deletion becomes final after seven days, and within that window you can cancel it by proving again that the datum is yours: if someone takes over your line, that wait is what lets you undo it. After that it propagates to synced devices and is recorded with evidence; our backups do not resurrect it. Honest limit: if someone uninstalls Datta or revokes permissions, we cannot delete inside their phone what their operating system already had.
• Object / restrict: oppose processing in the network channel without deleting (your datum stays sealed and inert). It also works forward: if someone adds you tomorrow, your datum does not enter either. You can lift the objection whenever you want, through the same channel.
• The other rights of your local law (access, rectification, portability where it applies): see the privacy policy, which covers you too.

Channel: datta.global/rights. No account and no email to anyone: the page sends you the code and resolves it there and then.

If that number or email belongs to a Datta account, the page will tell you and send you to sign in. There the same rights are exercised with a second factor and account recovery, which is more protection for you, not less.

The legal basis, in one sentence

We hold the datum under legitimate interest in providing the uploading user the address-book service they asked us for (GDPR art. 6(1)(f)), with the sealing and non-disclosure safeguards described; the network channel that gives you transparency and deletion exists to serve you, not to exploit you.

Who is responsible and where to complain

Controller: DATTTA LLC, a Delaware limited liability company (United States), file 10563369, formed on 26 March 2026, trading as «Datta», with its address at 1201 N Orange St, Ste 7665, Wilmington, DE 19801-1186, United States. EU representative: datta.global/contact. You can complain to your local data protection authority (AEPD in Spain, CNPD in Portugal, the Garante in Italy, the SIC in Colombia, Mexico's authority under the current LFPDPPP, and so on).

Version 0.0.1 · Last updated: 24 August 2026 · Controller: DATTTA LLC (trading as «Datta») · Contact: datta.global/contact